CVE-2024-25563 Information disclosure in Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi
A privileged local user can exploit improper initialization in Intel Wi-Fi firmware to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-25563?
CVE-2024-25563 is a medium-severity vulnerability in Intel Proset\/Wireless Wifi, published on 13 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow a privileged user to potentially enable information disclosure via local access.
Weakness: CWE-665
Which versions are affected by CVE-2024-25563?
It affects 2 products.
Products include Intel Killer, Intel Proset\/Wireless Wifi.
How do I fix CVE-2024-25563?
Upgrade to a fixed version.
Is CVE-2024-25563 being exploited?
There is no known exploitation of CVE-2024-25563 in the wild and no public exploit code.
Other vulnerabilities in Intel Proset\/Wireless Wifi
- CVE-2023-33875 Missing authorization in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2024-23198 Denial of service in Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi products
- CVE-2024-28049 Denial of service in Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products
- CVE-2023-28374 Denial of service in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2023-28720 Denial of service in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
Sources
Also known as DEBIAN-CVE-2024-25563, GHSA-9hqp-3p4c-742r.